My other half's HiJackThis log, please help

Yes her computer is becoming infested with all sorts of crap from the internet, particularly stubborn are "Derbiz" and "ebates money maker" who both seem to reappear after being deleted either on AdAware or Spybot.
I know it's gonna be an uphill struggle because I can't be there all day to make sure she keeps her virus software up to date all the time but I thought you good people might be able to offer some help if i post her hijackthis log.

You can check your Computer with 5,000,000 Anti-Virus-Softwares and spend $20,000 for it, as long as you surf the Internet with the Internet Explorer and activated ActiveX & ActiveScripting, it will be Sisyphus work.

I know it's gonna be an uphill struggle because I can't be there all day to make sure she keeps her virus software up to date all the time ....

Be that as it may, but you should ensure that an adequate antivirus program is installed, set to automatically update and to perform continual background scanning. You should also ensure that adequate spyware detection/removal software is also installed and set to perform continual background scanning/blocking.

And you should ensure that a browser such as Mozilla, Firefox or Opera is installed and set as 'default', with the security settings adequately configured.

I'm in a rush, I've copied those files to disc and i'll scan them on that site later and report back here but can I just add that I ran Adaware on her pc earlier and something nasty popped up and took away some of the nasties I was about to delete!! I can't believe that some evil git has even made something that can hijack adaware!

Ad-aware Cloak 1.0 is designed to allow Ad-aware to open fully when there are items on the system which close Ad-aware when it attempts to start, such as some CoolWebSearch variants. To use Ad-aware Cloak, save it to your system, and run the program before opening Ad-aware. Once Ad-aware Cloak opens, click "Activate Cloak" and then open Ad-aware and scan as normal. When you are done using Ad-aware, close Ad-aware Cloak.

Download the Pocket KillBox
Unzip the file to your desktop.
Run Pocket Killbox and paste the full file path of each of the below files in the box and click on Standard File Kill and End Explorer Shell While Killing File. Click on the button with the red circle and an X in the middle after you enter each file (see the files below).

If all files are not deleted, do not reboot yet. Run Pocket Killbox again and paste the full file path in the box and click on Delete on Reboot. Next click on the button with the red circle and an X in the middle. You will get a message saying "File with be deleted on next reboot, Process and Reboot now?" Click "Yes" to reboot only after the last file you enter.

Gawd what a pain in the rear end this is.
When I deleted one of those files and restarted the computer it asked me to activate windows!! I ended up having to type the CD key whatsit thingy back in.
This is the latest hijackthis log:
Logfile of HijackThis v1.99.1
Scan saved at 00:18:47, on 13/05/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Didn't have my disc with my while I was over there but I did the rk files thingy again and all that was left in the log was those C:\WINDOWS\system32\dfrg.msc and C:\WINDOWS\system32\oembios.bin files.

I've found this thread very helpful regarding the derbiz problem which I am also trying to get rid of. I followed all of Crunchie's advice but when I got to the Killbox bit I got stuck. This was the log I got from the rkfiles scan in safe mode:

Files Found in all users startup Folder............
------------------------
Files Found in all users windows Folder............
------------------------
C:\WINDOWS\choice.exe: UPX!
Finished
bye

I managed to delete the lycos, SHAgentNew, shawn_1 and choice.exe files but when I tried all of the 'elite' files Killbox said it could not delete them so I pressed the option to delete them on reboot but that didn't work either. I also can not and have never been able to find those elite files in my SYSTEM32 folder and only due to WinPatrol prompts have I been able to see that they were under two different named files of 'temp352' and 'uk_mm'. Everytime Derbiz installs itself I delete the desktop icon and either one of aforementioned files that I find in SYSTEM32.

I should just clarify that before when Derbiz installed itself it would come up as a new program in my main menu hence there was an uninstall option. I would press that, delete the desktop icon and the 'uk_mm' file in SYSTEM32. But recently, after continuously doing scans only the desktop icon appears and the new SYSTEM32 named file of 'temp532'. I usually delete those, bu tit keeps coming back. However, because of reading this thread I can see from the rkfiles scan that the elitedmz32.exe does exist along with alot of others but I just can't find them and Killbox can't delete them.